2026-10-06T05:20:19Z https://api.figshare.com/v2/oai

oai:figshare.com:article/34045599 2026-10-01T12:51:17Z category_29086 category_29092 item_type_12 month_year_10_2026

CGROM Open Edition v2.0: Cyber Governance and Risk Operating Model Thiago Oliveira Lima (25088590) Information security management Information systems education cybersecurity governance risk management operational resilience regulatory compliance NIST CSF 2.0 third party risk incident governance maturity model DMAIC GRC <p dir="ltr">CGROM is an open operating model that connects day to day security work to risk decisions made and overseen by leadership in regulated organizations. Version 2.0 expands the Open Edition from six to ten governance mechanisms, adding policy architecture and exception management, control evidence and audit readiness, incident governance and materiality determination, and artificial intelligence governance. It adds a risk assessment method with published impact and likelihood anchors, a catalogue of twenty four key risk indicators and ten performance indicators with formulas and data sources, a section on third party and supply chain risk, an operational resilience method with a testing ladder and scenario library, a consolidated inventory of United States incident reporting obligations, an artificial intelligence governance overlay, four adoption paths and an artifact library. Regulatory crosswalks are extended from four to nineteen references. The self assessment retains the fifteen core statements of version 1.0 for comparability and adds a fifteen statement extended module.</p><p dir="ltr">This edition builds on CGROM Open Edition version 1.0, published September 2026, <a href="https://doi.org/10.6084/m9.figshare.33963217" target="_blank">https://doi.org/10.6084/m9.figshare.33963217</a>. Version 1.0 remains available and citable. Version 2.0 adds material and does not withdraw or contradict any element of version 1.0, and is intended to be cited alongside it.</p> 2026-10-01T12:51:17Z Text Preprint 10.6084/m9.figshare.34045599.v2 https://figshare.com/articles/preprint/CGROM_Open_Edition_v2_0_Cyber_Governance_and_Risk_Operating_Model/34045599 CC BY 4.0